Black Duck launches an AI tool that fixes software security holes

Black Duck, a software security company, has announced a new AI agent that aims to fix security flaws in software as fast as attackers can take advantage of them. The news was reported by IT Security Guru on October 28, 2026.

What changed

An AI agent is a program that can carry out tasks on its own instead of waiting for a person to direct each step. Black Duck's pitch is that this one closes the gap between spotting a software flaw and repairing it. That gap is the problem it says it targets.

Software flaws are often found long before anyone patches them. A patch is a software update that fixes a known weakness. While a flaw sits unpatched, attackers have a window to use it.

Who it affects

Any business that relies on software has a stake here, which today means nearly all of them. Most companies do not write all their own code. They depend on vendors and outside tools, so a slow fix on the vendor side can leave customers exposed.

What is not known yet

The material available does not say how the agent works, what kinds of flaws it can fix, or whether it fixes them without a person checking the work. It also gives no price, release date or test results. The claim of matching attackers' speed comes from the announcement and has not been independently shown here.

What to do

A practical step is to ask your software vendors how quickly they patch known flaws. The answer tells you how long your business might stay exposed. Tools like this one may change what vendors can promise.